Search:

I think the refresh token issue can be resolved this way, though the code for obtaining a new token still need to be written (AFAIK it is not yet implemented):



public class OAuth2RestTemplate...

Since specs are not clear, IMHO, the only approach which will work for every configuration is to send the scope always. I suggest to make it default behavior.

I implemented the authorization page...

Hi Ryan,

I tried to work with scope, but no success so far.
By default, scope is not sent from auth server to client, even if it's changed. I managed to fix it by creating a custom redirect...

Thank you.

Hi guys,

I can't find any information about what OAuth 2.0 draft version your implementation supports. Could you please share this information and place it in some visible place (documentation,...